ERC20 token transfer from my address not initiated by me

I'm using Etherscan to monitor my wallet addresses for incoming and outgoing transfers. Today I've received a notification that amount x of ERC20 token y has been sent *from* my wallet address. This was at first very confusing to me because it certainly wasn't me and I have never heard of that token y.

My understanding is this: an ERC20 token is a smart contract that is storing the amount that each wallet address "owns" inside a mapping. So anyone can create such a token, allocate a certain balance to my (or anyone's ) wallet address and then execute a `transferFrom` from my (or anyone's) wallet address. This would then trigger such an Etherscan notification.

I wonder what the purpose of this is? Is this some kind of scam to lure me into visiting the URL that is contained in the tokens name in the hope that I'll do something silly on that website like signing a bad transaction?

This is the ERC20 token: https://etherscan.io/token/0xb831e6683293592d639e545336baad84b8427eb2